Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
File:                     RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft (raw, json)
Hash identifier:          GASu00Pqe0s8MES6DZaa0npe7w5tq9CwjcvFrToLtuE=
Subject key identifier:   32:97:84:6A:42:05:57:8C:B5:D7:C9:7F:5E:EB:88:92:2C:E5:3A:9B
Authority key identifier: 47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE
Certificate issuer:       /CN=4735e807d349d31564f9fd546138e3598e2007ce
Certificate serial:       01962E995126812F82727B781DA25AE6E053
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
Manifest number:          0DFB
Signing time:             Sun 13 Apr 2025 10:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:01 +0000
Files and hashes:         1: RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl (hash: 0NRw/4njdYeg1Ea0jHTCk7QTRgHdcygW12uBcCLqDTs=)
                          2: okKN99_kSuFiK1nEiQxwIj0skkI.roa (hash: BJdgdwQcgeiOTDLWh5HfcEvgJyNYUlctToI5pjHaF+4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:51:26:81:2f:82:72:7b:78:1d:a2:5a:e6:e0:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4735e807d349d31564f9fd546138e3598e2007ce
        Validity
            Not Before: Apr 13 10:02:01 2025 GMT
            Not After : Apr 14 10:02:01 2025 GMT
        Subject: CN=3297846a4205578cb5d7c97f5eeb88922ce53a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c0:59:ea:8f:65:14:c6:47:b5:10:b1:10:2e:
                    cf:c1:ec:61:f5:46:ae:fa:42:0c:73:58:88:4c:53:
                    0e:f8:5d:a6:f0:e5:fe:b4:9d:d3:a5:9d:f3:37:a5:
                    f7:d2:a8:1c:e8:cc:a7:ab:06:7a:33:50:c2:dd:dc:
                    5d:96:04:40:2c:0f:70:48:36:23:3f:b6:83:f3:d4:
                    a5:91:b1:e6:d2:27:27:ae:7a:a5:f2:4b:f5:ad:e4:
                    0a:ba:fe:e8:ff:c8:df:e4:24:fe:cf:8e:a2:0e:ee:
                    0a:59:b1:7f:07:6a:10:78:90:01:ac:e1:33:db:ce:
                    37:e9:c4:1c:cb:1d:e8:5c:02:17:f0:5c:92:19:52:
                    10:ab:ec:16:c4:74:d9:45:fa:88:58:53:ee:54:48:
                    d7:4b:64:c5:23:de:aa:af:13:91:10:18:28:2d:57:
                    2b:b6:db:d8:23:80:15:f7:00:2d:cb:5e:e9:e7:5a:
                    34:15:f6:a7:54:0b:bb:f3:46:05:36:5b:65:fe:2b:
                    e9:5e:e7:ae:ef:ba:6f:7c:11:82:9c:42:5e:7c:4f:
                    15:14:20:2d:e0:ce:23:ce:4c:53:39:f0:11:96:54:
                    7f:9a:63:0a:94:bf:68:59:58:e4:ff:79:f4:bc:27:
                    48:fa:a3:45:13:8d:25:83:a8:6f:60:fc:e1:ce:ad:
                    28:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:97:84:6A:42:05:57:8C:B5:D7:C9:7F:5E:EB:88:92:2C:E5:3A:9B
            X509v3 Authority Key Identifier:
                keyid:47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:15:24:02:8b:e4:f7:63:ba:3a:5d:2c:ae:94:16:1b:c8:08:
         85:0a:42:a5:78:63:02:09:1e:4b:a3:88:25:3a:54:f5:c0:1b:
         67:72:69:d2:e8:46:8f:21:b6:de:b4:25:83:11:64:cd:fc:80:
         a6:9c:d1:fb:a4:d7:f7:af:9d:8e:9f:5c:48:26:3b:0e:ed:01:
         e9:bc:46:80:f9:6a:f8:61:74:f6:fe:a1:81:34:77:5d:23:35:
         20:91:10:1b:58:92:09:bd:9a:dd:f1:c5:e0:7d:26:6c:c7:07:
         f9:e4:3d:8d:25:6c:73:9f:88:ed:ba:87:3d:7c:3c:cc:48:ca:
         30:97:51:62:ac:97:20:c3:19:87:8e:29:8a:93:a3:61:df:99:
         a4:fe:15:70:2f:f6:40:72:56:89:c0:f3:68:c4:29:9c:4c:14:
         8d:4e:2d:d6:8c:1f:f7:16:59:f8:f9:18:ea:76:cb:27:dc:77:
         90:04:e1:97:4e:b6:8d:8f:a9:89:3c:d1:79:3c:f9:0d:c2:b5:
         fa:16:93:bf:36:e5:c3:c3:2a:f6:b8:e3:9c:c2:71:8f:0a:ea:
         90:6f:d2:b2:fb:1c:89:1c:cc:39:50:f3:50:90:29:84:21:7b:
         61:b9:d3:e1:fc:a6:33:cb:6e:0a:5e:df:0a:56:2f:18:e1:74:
         68:ce:5b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----